본문 바로가기

컴터 때찌/E​xperience

sql injection cheat sheet https://www.owasp.org/index.php/SQL_Injection_Prevention_Cheat_Sheet http://pentestmonkey.net/blog/mysql-sql-injection-cheat-sheet/ http://ferruh.mavituna.com/sql-injection-cheatsheet-oku/ http://scratchpaper.thisissoma.me/19 http://www.xpendables.net/clx/index.php?topic=216.0 더보기
[링크] DNS 터널링 http://www.uow.edu.au/~kwanwu/DNSTunnel.pdf http://www.blackhat.com/presentations/bh-usa-08/Miller/BH_US_08_Ty_Miller_Reverse_DNS_Tunneling_Shellcode.pdf http://swbae.egloos.com/2525635 http://www.youtube.com/watch?v=D4TDhGecB9A&ytsession=gFgoOK9shHl3Hbf_qFhwX6Yxmcw7FzgO6s89Dw1g1IUUUCWYzQiuovjFswdq8-aS0rndbKblcgyo2fbh3vCB6LiAVGVtqkHs96R_9bxg7qEvw0mx6C62kR2y7OzieUN6QVK2jl3GeBhafAM7QJYd7mQfHE0mNox.. 더보기
Ubuntu DNS Server (BIND) # apt-get install bind9 (낮은 버전은 아래 사이트에서 구할수 있음, 현재 최신 9.8.1b ) 또는 # apt-get install openssh # wget http://ftp.arcane-networks.com/pub/mirrors/ftp.isc.org/isc/bind9/9.4.0/bind-9.4.0.tar.gz # tar -xvf bind-9.4.0.tar.gz | cd bind-9.4.0 # ./configure --prefix=/opt/bind9 --with-openssl=/usr/local/ssl --sysconfdir=/etc/bind # make && make install # root@LEOmaster:/etc/bind# cat named.conf include "/e.. 더보기
about snort http://core.ahnlab.com/178 http://core.ahnlab.com/181 http://www.snort.org/snort-downloads http://blog.naver.com/yisc237?Redirect=Log&logNo=60028817543 http://agol.egloos.com/5491648 http://nobless_05.blog.me/50068742242 http://blog.naver.com/koromoon?Redirect=Log&logNo=120119472030 http://soulfree7.egloos.com/2192970 http://mongu2.blog.me/140117528775 오픈소스 IDS/Snort Application/SPSA 더보기
DNS cache poisoning http://blog.naver.com/scbase?Redirect=Log&logNo=150083380853 http://www.cyworld.com/limjongmin15/6659376 더보기
[Error-VisualStudio] 시스템이 지정된 프로그램을 실행할 수 없습니다 vc 에서 재배포가 불가능하게 만들어진 프로그램(/MD 옵션이라고함)을 실행하면 나오는 메시지 해결방법은 vc버전에 맞는 재배포 가능 패키시 설치 관련 링크들 : http://ndd247.tistory.com/11 http://serious-code.net/moin.cgi/RedistributingVisualCppRunTimeLibrary http://technet.microsoft.com/ko-kr/library/cc737011(WS.10).aspx#BKMK_1 http://frontjang.tistory.com/172 http://www.microsoft.com/downloads/ko-kr/details.aspx?FamilyID=A5C84275-3B97-4AB7-A40D-3802B2AF5FC2 // .. 더보기
[링크] SELINUX 설정 http://oracle.tistory.com/272 //ㄴ노 http://sunyzero.egloos.com/4241364 더보기
About Kernel Object [제프리 리처의 Windows Via C/C++ 3장] # A. 커널 오브젝트가 뭐지? 운영체제나 우리가 개발하는 어플리케이션은 프로세스,스레드,파일 등과 같은 리소스들을 관리하기 위해 커널 오브젝트를 사용함 -Access Token Object -Event Object -File Object -File-mapping Object -I/O completion Object -Job Object -Mailslot Object -Mutex Object -Pipe Object -Process Object -Semaphore Object -Thread Object -Waitable Timer Object -Thread Pool Worker Factory Object .. 등의 커널 오브젝트들이 있고 이들을 윈도우.. 더보기
Linux System Call Table Linux System Call Table 출처 : http://bluemaster.iu.hio.no/edu/ca/lin-asm/syscalls.html The following table lists the system calls for the Linux 2.2 kernel. It could also be thought of as an API for the interface between user space and kernel space. My motivation for making this table was to make programming in assembly language easier when using only system calls and not the C library (for more i.. 더보기
about ROP http://www.blackhat.com/presentations/bh-usa-08/Shacham/BH_US_08_Shacham_Return_Oriented_Programming.pdf http://www.slideshare.net/guest9f4856/returnoriented-programming-exploits-without-code-injection http://teamcrak.tistory.com/archive/201101 http://www.a3sc.co.kr/kor/security/advice.php?mode=view&uid=20&tid=9&ss=&sc=&sn=&findstr=&pg=1 http://security.dsi.unimi.it/~gianz/pubs/acsac09-lecture.p.. 더보기